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SYSTEM SERVICES ENHANCEMENT FOR DISPLAYING CUSTOMIZED VIEWS 

BACKGROUND 

Field of the Invention 

[0001] The present invention relates to the field of computer software and, more 
particularly, to an enhancement to system services interfaces. 

Description of the Related Art 

[0002] Microsoft system services are programs that constantly run in the background 
of an operating system that perform necessary actions for the operating system. For 
example, the Microsoft Windows XP (TM) Operating System includes a Clipboard 
Service, a Server Service, a Windows Time Service, and many others. System 
administrators often view and/or modify system services to troubleshoot computer, 
peripheral, and network problems. The viewing and modification of system services is 
generally performed using the appropriate administrative tools developed for the 
operating system upon which the services are run. For the Microsoft Windows XP (TM) 
Operating System, the administrative tools include the Microsoft Configuration Utility 
(TM) that manages system services. 

[0003] The administrative tools for system services typically display all system 
services in an alphabetical fashion. The display can include a number of system 
services that are disabled or set to a manual state. Since different servers within a 
business network can have different purposes, only a subset of system services may be 
important. Nevertheless, conventional system service GUIs present all available 
system services, including a large quantity of relatively unimportant services. 
[0004] Further, large computer networks can be managed by a number of system 
administrators, each in charge of a different portion of the network. Each network 
administrator typically is concerned with different views of the system services that can 
affect portions of the network with which that administrator is responsible. At present, 
because conventional tools display all services regardless of whether the administrator 
has rights to the service, system administrators must scroll through a large number of 
services to locate a small set of services to which the administrator has rights and/or 
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authority. The presentation of all available system services within conventional 
management tools can therefore be inefficient and can be cumbersome to 
administrators. Further, the presentation of extraneous system services can represent 
a potential system security weakness; one permitting low-level administrators to seize 
control of system services outside of intended privilege boundaries. 
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SUMMARY OF THE INVENTION 
[0005] The present invention provides a method, a system, and an apparatus for 
customizing the display of system services within an administrative interface. More 
specifically, a number of system service profiles can be established for various users, 
groups, and sen/ers. Each of the system service profiles can specify the most relevant 
system services for the associated user, group, and/or server. The system service 
profiles, which specify a set of applicable system services, can be accessed whenever a 
system service interface is initiated. The specified subset of system services, as 
opposed to a complete set of system services, can be displayed within the system 
service interface. 

[0006] One aspect of the present invention can include a method for presenting 
system services. The system services can be Microsoft (TM) system sen/ices that 
execute within a Microsoft (TM) type operating system. The method can include the 
step of establishing a multitude of system service profiles. A request for the 
presentation of system services can be detected. A user identity associated with the 
request can be ascertained so that one of the system service profiles associated with 
the request can be determined. A graphical user interface specific to the determined 
system service profile that includes at least one system service can be presented. The 
graphical user interface can include a view contained within the Microsoft Configuration 
Utility (TM) or a utility compatible with the Microsoft Configuration Utility (TM). 
[0007] In one embodiment, the system service profiles can be integrated with the 
directory services of an operating system handling the system services. In another 
embodiment, a privilege group can be associated with the ascertained user identity. 
The system service profile can be based upon the privilege group. Alternatively, the 
system service profile used to limit the displayed system services can be unique to the 
user that initiated the request. 

[0008] In a particular embodiment, the system services specified within the service 
profiles can be categorized into a plurality of categories. In another embodiment, the 
system services can be categorized according to at least one of the servers that provide 
the services. At least a portion of the system services can be displayed within the 
graphical user interface according to the categories. 
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[0009] In yet another embodiment, a system service configuration can be provided 
so that authorized users can modify at least one system service profile. Additionally, a 
series of views can be provided to configure at least one system service profile. The 
series of views can be presented in a step-wise fashion and can represent a system 
service profile configuration wizard. 

[0010] Another aspect of the present invention can include a system for 
administrating operating system services. The system can include a services view, a 
means for limiting the services displayed in the services view, a means for ordering the 
display of services, and/or a profile management interface. The services view can 
graphically display a multitude of operating system services. The limiting means can 
limit displayed services to a subset of currently executing services. In one embodiment, 
the limiting means can be a software plug-in for a Microsoft Windows (TM) type 
operating system. Additionally, the operating system services can be Microsoft 
Windows (TM) type services and the limiting means can be disposed within a directory 
services computing space. For example, the directory services computing space can 
include a Microsoft Active Directory (TM) compatible space or a Novell Directory 
Services (TM) compatible space. The profile management interface can permit an 
authorized user to customize the limiting means. Further, the ordering means can order 
the display of the services within the services view according to various predefined 
categories of services. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
[0011] There are shown in the drawings, embodiments which are presently 
preferred, it being understood, however, that the invention is not limited to the precise 
arrangements and instrumentalities shown. 

[0012] FIG. 1 is a schematic diagram illustrating a system for managing system 
services in accordance with the inventive arrangements disclosed herein. 
[0013] FIG. 2 is a flow chart illustrating a method for presenting system services 
within a graphical user interface (GUI) in accordance with the inventive arrangements 
disclosed herein. 

[0014] FIG. 3 is an exemplary GUI for managing system services in accordance with 
the inventive arrangements disclosed herein. 

[0015] FIG. 4 is another exemplary GUI for managing system services in accordance 
with the inventive arrangements disclosed herein. 

[0016] FIG. 5 is a schematic diagram illustrating a profile configuration wizard in 
accordance with the inventive arrangements disclosed herein. 
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DETAILED DESCRIPTION OF THE INVENTION 
[0017] FIG. 1 is a schematic diagram illustrating a system 100 for managing system 
services in accordance with the inventive arrangements disclosed herein. System 
services can include a multitude of operating system programs that can execute in the 
background of an operating system to handle operating system events, such as the 
installation/removal of plug and play devices, error logging and reporting, dial-up 
activities, and the like. For example, the Microsoft Windows XP (TM) Operating System 
includes a Plug and Play Service, an Error Reporting Service, a Telephony Service, and 
numerous other services. 

[0018] In system 100, an administrative console 105 can be used to manage system 
services. For example, in one embodiment where the operating system of system 100 
is a Microsoft Windows (TM) type operating system, the administrative console 105 can 
include the Microsoft Configuration Utility (TM) for managing services. A Microsoft 
Windows (TM) type operating system can include Windows 95 (TM), Windows 98 (TM), 
Windows NT (TM), Windows 2000 (TM), Windows XP (TM), Windows 2003 (TM), and 
other operating systems past and future that are fonvard and/or backward compatible 
with the listed operating systems. In another example, the administrative console 105 
can manage services for the Linux (TM) operating system, the Apple (TM) operating 
system, the z/OS (TM), as well as any other computer operating system that utilizes 
system services. 

[0019] The administrative console 105 can display system services provided by one 
or more computing devices including server 120, peripheral 125, hub 130. server 135, 
desktop 140, and/or desktop 145. Moreover, settings of the administrative console 105 
can be used to limit the services presented in a computing device specific manner. For 
example, when the server 120 is a print server, the system services associated with 
server 120 can be limited to those services relating to printing and print management. 
In another embodiment, the services presented to an email administrator for server 130, 
which can be an e-mail server, can be limited to e-mail related services. Alternatively, a 
less restricted view of services for the server 130 can be presented to a server 
administrator. 

[0020] Further, the administrative console 105 can be accessed by a number of 
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different users and groups including user 160, user 165, user 170, user 175, group 150, 
and group 155. Group 150 and 155 can include a set of users having a set of privilege 
levels for the services managed by the administrative console 105. Privilege levels can 
include, but are not limited to, permissions for guests, default users, power users, 
system back-up administrators, printer administrators, application administrators, help- 
desk technicians, developers, and the like. Different system services can be presented 
to different users and privilege groups. For example, guests and default users can be 
provided with no access to system services; power users can be provided with limited, 
machine-specific access to system services; and, system administrators can be 
provided full access to system services. 

[0021] The administrative console 105 can limit the presentation of system services 
by establishing system service profiles. A system service profile can be a memory 
space for specifying a system service subset. System service profiles can be 
established for users, groups, computing devices, and/or a combination of the same. 
[0022] Additionally, the administrative console 105 can include a graphical user 
interface (GUI) 110 and a profile data store 178. The GUI 110 can include a service 
management view within which service management options can be presented. For 
example, using the GUI 110, authorized users can view, initiate, terminate, modify, 
and/or othenA/ise manipulate system services. In one embodiment, the GUI 110 can 
include a profile management interface, which can permit authorized users to modify 
system service profiles. 

[0023] The profile data store 1 78 can be a storage space used to store and retrieve 
system service profiles that the administrative console 105 utilizes. Table 180 
represents data contained by the profile data store 178. It should be appreciated, 
however, that table 180 is included for purposes of illustration only, and that any 
suitable data schema can be used to specify system service profile information. 
[0024] The table 180 can include column fields for a system service profile 182, a 
group 184, a service set 186, and a parameter set 188. The system service profile 182 
can be a key field that uniquely identifies a particular profile. The group 184 can specify 
the set of individuals and/or computing devices to which a profile applies. For example, 
when the group 184 specifies group 150, the corresponding profile (Profile SP1) can 
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apply to user 160, user 165, and any and other members of group 150. In another 
example, the group 184 can specify that Profile B can apply to services provided by 
server 120. 

[0025] The service set 186 can establish which system services are affected by the 
system service profile 182. In one embodiment, the service set 186 can represent the 
services that are to be displayed when the corresponding profile is utilized. In another 
embodiment, the service set 186 can represent services that are to be hidden or not 
displayed when the corresponding profile is utilized. The parameter set 188 can include 
a variety of settings that can be specified for a system service profile 182. For example, 
the parameter set 188 can include parameters for ordering displayed system services, 
profile specific interface 1 10 options, and the like. 

[0026] It should be noted that multiple system service profiles 182 can apply to users 
of the administrative console 105. For example. Profile SP2 and Profile D can both 
apply when user 170 is presented system service information concerning hub 130. The 
handling of multiple profiles by the administrative console 105 can depend upon settings 
established within the administrative console 105. For example, one setting (a union 
setting) can result in the display of those services satisfying all applicable system 
service profile conditions. In another example, a different setting within the 
administrative console 105 can result in the display of those services satisfying other 
ones of the applicable system service profile conditions. 

[0027] Additionally, in one embodiment, the functionality of the administrative 
console 105 can be accessed remotely from a communicatively linked computing 
device, which can be include server 120, server 135, desktop 145, and/or desktop 140. 
The accessing computing device can function as a dumb tenninal, as a second 
administrative console, and/or as a profile configuration server. In another embodiment, 
data within the profile data store 178 can be centrally located. In such an embodiment, 
multiple administrative consoles can access profile information contained within the 
profile data store 1 78. 

[0028] FIG. 2 is a fiow chart illustrating a method 200 for presenting system services 
within a GUI in accordance with the inventive arrangements disclosed herein. The 
method 200 can begin in step 205, where multiple system service profiles can be 
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established. Each system service profile can represent a custonnized subset of system 
services. The customization can be associated with a user, group, and/or computing 
system. In step 210, a request for the presentation of system services can be detected. 
For example, a user of an administrative console can initialize a GUI for managing 
system services or sign in so that the GUI can be activated. In step 215, the identity of 
the user that initialized the request can be determined. For example, the user 
identification for the user logged onto the machine that made the detected request can 
be determined. A computing device or set of computing devices associated with the 
request can also be identified in step 215. 

[0029] In step 220, a privilege group can be optionally identified. For example, the 
user making the request can be identified as a power user, a printer administrator, 
and/or a system administrator. In step 225, at least one system service profile can be 
determined from the user identifier, privilege group, and/or computing system. In step 
230, one or more system services can be selected for display based upon the system 
service profiles. In one embodiment, these system services can be accessed by a 
requestor based upon access rights specified within the system service profile. In step 
235, the system services can be optionally categorized. For example, the system 
services can be categorized by functional group and/or computing device. In step 245, 
the system services that are to be displayed can be presented within the GUI. If the 
system services were previously categorized, the system services can be ordered or 
othenA^ise arranged by category. 

[0030] FIG. 3 is an exemplary GUI 300 for managing system services according to 
one embodiment of the invention disclosed herein. The GUI 300 can include a 
navigation section 305 and a detail section 307. The navigation section 305 can display 
service categories and subcategories. Selections made within the navigation selection 
305 can have a dynamic affect upon the data displayed within the detailed section 307. 
[0031] The detail section 307 can include, but is not limited to, a category column 
310 for displaying service categories, a service name column 315 for displaying the 
service names, a server column 320 for displaying the server that provides an 
associated service, a status column 325 for displaying operational status of an 
associated service, and the like. 
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[0032] In operation, the Services (local) item can be selected from within the 
navigation section 305. In response to the selection, all services local to the computing 
system meeting the criteria established by the appropriate system service profile can be 
displayed within the detailed section 307. For example, two service profiles, one for a 
Print Operator and one for an E-mail Operator, can be determined to be applicable for in 
a given instance shown in GUI 300. In the example, the user requesting services can 
have two functional roles, that of Print Operator and Email Operator. If the user 
requesting services only had one functional role, then only the category for that 
functional role would be displayed. It should be noted that the detail section 307 can 
order services first according to profile and second in descending alphabetical order 
according to service name. 

[0033] FIG. 4 is another exemplary GUI 400 for managing system sen/ices according 
to one embodiment of the invention disclosed herein. The GUI 400 can include a 
navigation section 405 and a detail section 407 that operate In a fashion similar to the 
equivalent components detailed in FIG. 3. The navigation selection 405, however, can 
include category navigation items based upon functional categories, such as printer, e- 
mail, storage, and the like. The detail section 407 can include several display tabs, 
each for a different computer device. When a computer device tab is selected, the 
system services of the associated computing device can be presented. Computing 
devices on the tabs can include, for example, server 425, server 430, client 435, and 
peripheral device 440. 

[0034] In one embodiment, the only services and options available to a user of GUI 
400 will be those to which the user has been authorized. The GUI 400 can then be 
dynamically modified based on the user's privileges and/or associated system service 
profile. For example, when a system user does not have permission for server 425 
and/or server 430, tabs for those servers will not appear within the detail section 407. In 
another example, if the user of GUI 400 is a power user, as opposed to an 
administrator, the detail section 407 will contain those services to which the power user 
has been granted privileges. 

[0035] FIG. 5 is a schematic diagram illustrating a profile configuration wizard 500 in 
accordance with the inventive arrangements disclosed herein. The profile configuration 
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wizard 500 can include a series of views that perform a task relating to at least one 
system service profile. The series of views can include wizard screen 505 and at least 
one other wizard screen 510. Each of the views of the profile configuration wizard 500 
can be displayed in a step-wise fashion to prompt a user for information relating to 
system services profile management and operation. Accordingly, the profile 
configuration wizard 500 can allow an authorized user to setup a profile, define profile 
categories, specify services for each profile, and the like. 

[0036] The various GUIs disclosed herein are shown for purposes of illustration only. 
Accordingly, the present invention is not limited by the particular GUI or data entry 
mechanisms contained within views of the GUI. Rather, those skilled in the art will 
recognize that any of a variety of different GUI types and arrangements of data entry, 
fields, selectors, and controls can be used, 

[0037] The present invention can be realized in hardware, software, or a combination 
of hardware and software. The present invention can be realized in a centralized 
fashion in one computer system or in a distributed fashion where different elements are 
spread across several interconnected computer systems. Any kind of computer system 
or other apparatus adapted for carrying out the methods described herein is suited. A 
typical combination of hardware and software can be a general purpose computer 
system with a computer program that, when being loaded and executed, controls the 
computer system such that it carries out the methods described herein. 
[0038] The present invention also can be embedded in a computer program product, 
which comprises all the features enabling the implementation of the methods described 
herein, and which when loaded in a computer system is able to carry out these 
methods. Computer program in the present context means any expression, in any 
language, code or notation, of a set of instmctions intended to cause a system having 
an information processing capability to perform a particular function either directly or 
after either or both of the following: a) conversion to another language, code or 
notation; b) reproduction in a different material form. 

[0039] This invention can be embodied in other forms without departing from the \ 
spirit or essential attributes thereof. Accordingly, reference should be made to the 
following claims, rather than to the foregoing specification, as indicating the scope of the 
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invention. 
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